Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439373630.roa
File: 3130332e38302e39342e302f32342d3234203d3e20313439373630.roa (raw, json)
Hash identifier: lDjHb/eHlPOg3j/rEiAZGGHlACcOlJh50eEAoRaQWUM=
Subject key identifier: 72:57:51:14:5F:34:36:26:E3:90:A9:BF:AD:83:1C:98:F2:6E:A6:09
Certificate issuer: /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial: 67D412505BD65AB1C341F2818023595C3F7B6D9D
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439373630.roa
Signing time: Thu 07 Jul 2022 05:16:54 +0000
ROA not before: Thu 07 Jul 2022 05:11:54 +0000
ROA not after: Thu 06 Jul 2023 05:16:54 +0000
asID: 149760
IP address blocks: 103.80.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d4:12:50:5b:d6:5a:b1:c3:41:f2:81:80:23:59:5c:3f:7b:6d:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Validity
Not Before: Jul 7 05:11:54 2022 GMT
Not After : Jul 6 05:16:54 2023 GMT
Subject: CN=725751145F343626E390A9BFAD831C98F26EA609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:de:cc:7e:cf:08:5a:b2:f8:81:e5:2e:37:3f:
63:77:84:6f:fe:92:64:47:3e:2e:e7:37:ff:4b:bc:
fb:05:64:82:d1:cb:b6:7d:85:45:5d:7c:34:4e:f5:
38:3f:58:87:27:f0:33:4d:0e:6e:92:25:4b:6c:c2:
98:23:c3:52:17:38:43:b1:2c:1f:dd:51:ef:87:4f:
ba:a6:7e:84:ed:11:b5:d7:e3:50:78:d7:75:9e:d7:
5a:44:53:02:dc:fc:2c:1e:5b:17:09:3f:5f:4b:e2:
3d:2c:40:f0:62:4d:ab:a0:50:b6:fd:e3:aa:ef:49:
ab:6f:aa:43:38:47:c3:85:30:4c:81:83:56:d4:05:
3b:16:db:05:34:1f:96:fe:16:8a:5e:dd:61:c2:ef:
e8:aa:61:9f:1c:2f:34:d4:1e:cd:45:e6:1b:d7:b7:
30:64:f4:71:ce:f9:74:77:17:ae:f4:54:8d:8f:16:
c7:72:4d:e3:8c:f2:e3:3c:b7:cf:fa:02:af:3e:71:
18:36:13:04:61:91:5b:38:78:ac:48:e5:37:fc:99:
0c:01:a9:48:b2:50:c6:7e:39:6c:3f:b7:7c:4c:2f:
94:bd:99:7e:19:ff:04:b6:79:3c:73:48:b6:8c:18:
12:35:14:bf:b1:44:54:13:c7:58:8b:23:61:90:fa:
63:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:57:51:14:5F:34:36:26:E3:90:A9:BF:AD:83:1C:98:F2:6E:A6:09
X509v3 Authority Key Identifier:
keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32342d3234203d3e20313439373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.80.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:cb:df:fe:dc:b3:21:04:75:31:a8:5a:93:fb:52:4e:7d:21:
13:d8:b5:37:16:9e:fb:0f:a9:45:f7:21:48:5f:cc:e7:1d:d9:
74:93:7a:9a:28:cc:c4:8e:b5:d6:5e:fc:9c:18:b6:d1:ef:b7:
88:85:4f:5f:67:c1:05:8c:59:4f:36:e1:af:5c:3e:c5:9b:8e:
0e:99:ce:e4:3f:4f:6b:6a:3c:73:63:85:12:45:28:fe:dc:5a:
7f:15:ea:89:75:1d:8a:23:a3:de:37:b5:b4:1a:28:84:f6:3c:
7a:17:cf:9b:de:15:8d:e5:e8:10:60:27:33:87:c9:29:db:9c:
a4:ba:c3:a3:57:10:41:c2:8b:5f:91:d2:9e:ec:e9:36:d3:cb:
14:f1:e7:e5:c6:90:e6:62:98:5c:9d:dd:17:dc:1e:28:94:e7:
41:89:09:5d:35:c2:86:d6:3b:39:90:c2:48:9a:e5:87:d8:ff:
e0:5a:df:60:ff:6c:29:21:e0:87:91:14:ec:13:ab:91:37:02:
3c:8f:c8:30:7a:2a:42:ea:30:6d:f8:58:f7:4e:27:2c:90:15:
d8:cc:b9:a8:24:de:fe:3f:c8:51:18:57:d3:f6:1f:29:85:6e:
88:74:f3:2b:63:fe:0a:8e:dc:07:9b:66:de:0c:35:45:5a:6c:
ce:cf:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org